PENN LEGAL
Cookie Policy
Effective October 3, 2026
Penn uses a small number of cookies and on-device storage so you can sign in, stay secure, and keep your preferences. Penn does not use advertising, analytics, or tracking cookies, and does not let third parties set cookies to follow you across other sites. Penn currently uses these technologies for authentication, security, offline access, and preferences you choose.
Cookies
penn-sessionKeeps you signed in and remembers your session securely.120 minutes of inactivityXSRF-TOKENProtects your account from cross-site request forgery.Same as your sessionremember_web_*Keeps you signed in on this device, only if you tick "Remember me" when you log in.Up to 400 days, or until you log outIf you sign in with Google, Google may set its own cookies on its sign-in pages under Google's cookie policy.
On-device storage
Penn also stores some information in your browser instead of cookies. This stays on your device and is not sent to Penn unless noted.
- Preferences (local storage): appearance theme, sound settings, reminder settings, which notifications you have read, whether you finished the app tour, and when you dismissed the install prompt.
- Offline records (IndexedDB): a saved copy of your financial workspace for offline access, plus transactions awaiting sync. Queued transactions are removed after successful sync; the workspace remains until replaced or you clear site data.
- App cache (service worker): app files, recent pages, and reminder-delivery history, so Penn loads quickly and avoids duplicate reminders. These remain until the cache is updated or you clear site data.
Your choices
You can block or delete cookies and site data in your browser settings. Blocking the session or security cookies will stop you from signing in. Clearing site data resets your preferences and removes any offline records that have not synced yet, so reconnect and let Penn sync first.
Changes and contact
If Penn starts using a new kind of cookie, we will update this page and, where the law requires it, ask for your consent first. Questions can be sent through Penn support. See also the Privacy Policy.